Privilege separation

Privilege separation

Privilege separation in computer programming and security is a technique that divides a program into parts, each with specific privileges needed to perform a task. This method helps to limit the potential damage of a computer security vulnerability by ensuring that any successful attack against the larger program will gain minimal access. Privilege separation can be achieved by distinguishing user IDs, splitting a single program into smaller ones with different file system permissions, or by dropping root under Unix-like operating systems.

2 courses cover this concept

CS 131: Fundamentals of Computer Systems

Brown University

Spring 2020

This course delves deep into the foundational principles behind computer systems, ranging from hardware intricacies to the vast global internet. Students gain insights into systems programming, the architecture of computer systems, concurrency, and the dynamics of distributed systems. Notably, the curriculum includes projects that offer hands-on experience, like building library functions, creating a toy OS, and designing a scalable key-value storage service. It's a stepping stone to advanced courses like Distributed Systems, Databases, and Computer Systems Security.

No concepts data

+ 35 more concepts

CSCI 0300: Fundamentals of Computer Systems

Brown University

Spring 2023

Introductory course covering computer system fundamentals including machine organization, systems programming in C/C++, operating systems concepts, isolation, security, virtualization, concurrency, and distributed systems. Projects involve implementing core OS functionality.

No concepts data

+ 32 more concepts